Questions[telemetry](ubuntu)

From a fresh reboot I entered netstat -an | more in a terminal shell and located a foreign ip address 99.86.32.24 from netstat's output connected to my system over port 443. I've opted out of sending diagnostic reports to cannonical telemetry servers, yet I am connected to cannonical and amazon aws, why?

Here's the output of the whois command with the amazon ip passed as a argument:

NetRange:       99.85.128.0 - 99.87.191.255
CIDR:           99.85.128.0/17, 99.87.128.0/18, 99.86.0.0/16, 99.87.0.0/17
NetName:        AMAZO-4
NetHandle:      NET-99-85-128-0-1
Parent:         NET99 (NET-99-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS16509
Organization:   Amazon.com, Inc. (AMAZO-4)
RegDate:        2018-01-10
Updated:        2018-01-11
Ref:            https://rdap.arin.net/registry/ip/99.85.128.0



OrgName:        Amazon.com, Inc.
OrgId:          AMAZO-4
Address:        Amazon Web Services, Inc.
Address:        P.O. Box 81226
City:           Seattle
StateProv:      WA
PostalCode:     98108-1226
Country:        US
RegDate:        2005-09-29
Updated:        2020-04-07
Comment:        For details of this service please see
Comment:        http://ec2.amazonaws.com
Ref:            https://rdap.arin.net/registry/entity/AMAZO-4


OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-266-4064 
OrgTechEmail:  [email protected]
OrgTechRef:    https://rdap.arin.net/registry/entity/ANO24-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-266-4064 
OrgNOCEmail:  [email protected]
OrgNOCRef:    https://rdap.arin.net/registry/entity/AANO1-ARIN

OrgRoutingHandle: ADR29-ARIN
OrgRoutingName:   AWS Dogfish Routing
OrgRoutingPhone:  +1-206-266-4064 
OrgRoutingEmail:  [email protected]
OrgRoutingRef:    https://rdap.arin.net/registry/entity/ADR29-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-266-4064 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AEA8-ARIN

OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName:   IP Routing
OrgRoutingPhone:  +1-206-266-4064 
OrgRoutingEmail:  [email protected]
OrgRoutingRef:    https://rdap.arin.net/registry/entity/IPROU3-ARIN

My overall question here is why would ubuntu be connected to any other remote server if I have opted out from sending telemetry data? Is there a reason for this/these connections? Or should I be paranoid?

Apart from looking at docker stats, I want to know how docker consumes physical CPU or where will it be classified between CPU User, CPU System and CPU Guest, etc, stats?

I am collecting metrics using netdata. I am looking at different types of workloads; this means just some prepackaged code that may contain a docker image because that is where some software is installed or databases that other parts of this workload or code in question depend on. Nedata returns a lot of metrics, for example,at the system level for CPU: you will have the following:

netdata.system.cpu.guest
netdata.system.cpu.guest_nice
netdata.system.cpu.idle
netdata.system.cpu.iowait
netdata.system.cpu.irq
netdata.system.cpu.nice
netdata.system.cpu.softirq
netdata.system.cpu.steal
netdata.system.cpu.system
netdata.system.cpu.user

If I am dealing with a VM, I know that the guest operating system cpu ticks values would be recorded as netdata.system.cpu.guest; I am trying to know where those for docker images would be recorded.

I have looked at docker stat and read over articles on the internet but I can't seem to find where these cpu values would be recorded.

This is important to me because I am trying to characterize these workloads, and I want to know things I shouldn't bother looking too much at with respect to characterization if the workloads do not have a docker image

I just upgraded to 18.04 and wanted to try out livepatch. After reading the Livepatch Terms of Service web page (https://www.ubuntu.com/legal/terms-and-policies/livepatch-terms-of-service) I wondered a bit about these two paragraphs in the personal data section:

We may also collect certain non-personally-identifiable information, which is located on your computer. The information collected may include statistics relating to how often data is transferred, and performance metrics in relation to software and configuration. You agree this information may be retained and used by Canonical.

Canonical may disclose any or all personal data and content you have sent, posted or published if required to comply with applicable law or the order or requirement of a court, administrative agency or other governmental body. All other use of your personal data is subject to the Privacy Policy.

I understand that, in order to do the live patching, Canonical needs to know some things about my system, like the kernel version. Also, through my SSO account and the token they know my email address and name.

So far so good. But I wonder what else Canonical needs to know about my system. The above text is vague about this. "Statistics" and "performance metrics" do not sound like they are necessary for the live patch service per se. Also, if those data are really "non-personally-identifiable", why Canonical is asking one paragraph later to agree that they may disclose them to administrative agencies or governmental bodies on request?

What are the data transmitted to Canonical, once and regularly? How can I investigate what is transmitted? How can I be sure it will not change suddenly to transmit more than I want?

This is a technical question. I do not want to discuss Canonical's TOS or legal issues. I really want a technical way to find what is transmitted before I sign up.

I installed 18.04 (clean install) on a computer that is intended to be a multi-user system. Every new user I create gets asked to opt out of telemetry on his or her first login (as part of the welcome screen, as shown in this question). As an admin, I do not want the system to ever send these reports to Canonical, even if one of the users accidentally misses the question, e.g. by quickly clicking through the welcome screen.

How can I pre-emptively opt-out of sending system reports for all users?

I know that I can just log in as each user myself after I create them. However:

1. Is there is a command or setting that can do it once and for all?
2. If possible, I would like the users to still get the welcome screen (since it explains what has changed in 18.04), but with the telemetry question disabled, already set to No, or skipped altogether.

It appears that the welcome screen can be completely removed by uninstalling the gnome-initial-setup package but I am unsure if this disables the telemetry.

During installation of Ubuntu 18.04, after the runtime environment is enabled, and during the first login, a question pops up asking whether you want to Help Improve Ubuntu.

(Screenshot is from the 18.04 first-login "Welcome" process)

If you say yes, then a brief report is sent to Canonical describing basic characteristics of your system such as Processor type (AMD or i386), screen resolution and the default desktop environment. Nothing very intrusive.

This helps Canonical get an accurate count of installations and such. And they ask it so obviously and politely that I decided that "It's not a bug - it's a feature" and is OK by me.

So I said yes but now I have changed my mind due to the reporting that suggests that Canonical will become the next Microsoft - but do not want to reinstall my system.

How can I turn this feature off?